CVE-2016-4000

Name of the Vulnerable Software and Affected Versions Jython versions prior to 2.7.1rc1

Description The issue is related to the restoration of untrusted data in memory, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted serialized PyFunction object. This can potentially allow the execution of arbitrary code.

Recommendations For versions prior to 2.7.1rc1, update to version 2.7.1rc1 or later to resolve the issue. As a temporary workaround, consider restricting the use of serialized PyFunction objects until a patch is available.